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A linear time algorithm for quantum 2-SAT 


Niel de Beaudrap* Sevag Gharibian^ 


Abstract 

The Boolean constraint satisfaction problem 3-S AT is arguably the canonical NP-complete prob¬ 
lem. In contrast, 2-SAT can not only be decided in polynomial time, but in fact in deterministic linear 
time. In 2006, Bravyi proposed a physically motivated generalization of fc-SAT to the quantum set¬ 
ting, defining the problem “quantum fc-SAT”. He showed that quantum 2-SAT is also solvable in 
polynomial time on a classical computer, in particular in deterministic time O(n^), assuming unit- 
cost arithmetic over a field extension of the rational numbers, where n is number of variables. In this 
paper, we present an algorithm for quantum 2-SAT which runs in linear time, i.e. deterministic time 
0{n + m) for n and m the number of variables and clauses, respectively. Our approach exploits the 
transfer matrix techniques of Laumann et al. [QIC, 2010] used in the study of phase transitions for 
random quantum 2-SAT, and bears similarities with both the linear time 2-SAT algorithms of Even, 
Itai, and Shamir (based on backtracking) [SICOMP, 1976] and Aspvall, Plass, and Tarjan (based on 
strongly connected components) [IPL, 1979]. 


1 Introduction 

Boolean constraint satisfaction problems lie at the heart of theoretical computer science. Among the 
most fundamental of these is k-SAI, in which one is given a formula 0 on n variables, consisting of a 
conjunction 4>{x) = Ci AC '2 A- • -ACm of m clauses, each of which is a disjunction of k literals, e.g. (x/^ V 
XjVxj)forl ^ h,i,j ^ n. The problem is to determine whether there exists an assignment x G {0,1}"^ 
which simultaneously satisfies all of the constraints C*, i.e. for which (l){x) = 1. While 3-SAT is NP- 
complete [Coo72, Lev73, Kar72], 2-SAT admits a number of polynomial time algorithms {e.g. [DP60, 
Kro67, EIS76, APT79, Pap91]), the fastest of which require just linear time [EIS76, APT79]. 

In 2006, Bravyi [Bra06] introduced /c-QSAT, a problem which generalizes k-SAI, as follows. In 
place of clauses Ci, acting on k-hit substrings of n bit strings x G {0,1}”, one considers orthogonal 
projectors Hj which act on /c-qubit subsystems of an n-qubit system |'0) G where T-L := C^. (A 

sketch of how k-SAI can be embedded into fc-QSAT is given in Section 2.) These projectors extend to act 
on states | ip) by defining Tf./ = 11,(8)/, so fhaf Ilj acfs as fhe idenfify on all tensor factors apart from fhose 
qubifs on which n, is defined. One fhen considers |^) to “satisfy” fhe 2-QSAT insfance if 11, |^) =0 for 
all i. This formulation may be motivated, e.g., by problems in many-body physics [dBOE, CCD+11]. 
While 3-QSAT is complete for QMAi [Bra06, GN13] (a quanfum generalization^ of NP), 2-QSAT is 
solvable in deterministic polynomial lime [Bra06], using O(n^) field operalions over C. 

Given fhe existence of linear lime algorilhms for classical 2-SAT, Ihis raises fhe nalural queslion: 
Can 2-QSAT also be solved in linear time? Our main resull in Ibis paper is as follows. 

Theorem 1. There exists a deterministic algorithm SOLVEq which, given an instance of 2-QSAT, out¬ 
puts a representation of a satisfying assignment if one exists {presented as a list of one- and two-qubit 
unit vectors to be taken as a tensor product), and rejects otherwise. The algorithm halts in time 0{n-\-m) 
on inputs on n qubits with m projectors (assuming unit-cost operations over C). Furthermore: 
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1 



• SOLVEq can produce its output using 0{{n + m)M{n)) bit operations, where M{n) is the 
asymptotic upper bound on the cost of multiplying two n bit numbers; 

• If the projectors are all product projectors, the algorithm SOLVEq^ requires only 0(n + m) bit 
operations regardless of what computable subfield F C C the projector coefficients range over. 

Remarks: The setting of product constraints above includes classical 2-SAT (see Section 2): in this case 
the bit-complexity of our algorithm matches optimal 2-SAT algorithms [EIS76, APT79]. For more gen¬ 
eral instances of 2-QSAT, the 0((m-|-n)M(n)) bit-complexity of our algorithm is compares favourably 
to the complexity of extracting a satisfying assignment using Bravyi’s 2-QSAT algorithm, which requires 
0{n^M{n)) bit operations if one uses similar algebraic algorithms to ours. In “Significance and open 
questions” below, we discuss the question of field-operation-complexity vs. bit-complexity, as well as 
whether our algorithm is tight in terms of bit complexity. 

Techniques employed. The origin of this work is the observation that Bravyi’s 2-QSAT algorithm 
can be thought of as an analogue of Krom’s 2-SAT algorithm [Kro67], which involves computing the 
transitive closure of directed graphs. Krom’s algorithm repeatedly applies a fixed inference rule for each 
pair of clauses sharing a variable. The repealed applicalion of Ihe inference rule leads fo an O(n^) lime 
lo determine salisfiabilily and an 0(n'^) lime lo compute a satisfying assignment Bravyi’s algorilhm 
has Ihe same runtimes, measured in terms of Ihe number of field operations. 

This work aims lo develop a quanlum analogue of Aspvall, Plass, and Tarjan’s (APT) linear time 
2-SAT algorilhm [APT79], which reduces 2-SAT lo computing Ihe slrongly connected componenls of a 
directed graph. Note lhal classically (a V/3) is equivalenl lo (a ^ /3) and (/3 => a), for literals a and jj. 
APT conslrucls an implication graph G of a 2-SAT inslance f, wilh vertices labelled by literals Xi and 
Xi for each i, and edges a ^ j3 and —>• a for each clause (a V /3). Then, Ihey show lhal f is salisfiable 
if and only if Xi and Xi are nol in Ihe same slrongly connected componenl of G for any i [APT79]. As 
Ihe slrongly connected componenls of G can be computed in linear time [Tar72], Ihis yields a linear time 
algorilhm for 2-SAT. 

In Ihe quanlum selling, nol all n-qubil slates can be described by assignment lo individual qubils 
{e.g., enlangled slates). Forlunalely, Chen et al. [CCD+11] show lhal we may reduce any inslance of 
2-QSAT lo an inslance which is salisfiable if and only if Ihere is a satisfying slate, in which qubils 
have separate assignment (see Section 2 for delails). In Ihis selling, Ihere is a nalural analogue of Ihe 
equivalence (xj V Xj) = (x* xj) A {xj ^ Xj) in terms of so-called “Iransfer malrices” (e.g. [Bra06, 
FMSSIO]). For any rank-1 quanlum conslrainl Iljj e L (C^ 0 C^) on qubit i and j, Ihere exist a 
transfer matrix Tjj G L (C^), such lhal for any assignmenl \'fi) lo qubil i such lhal / 0 , 

Ihe slate on qubil j for which Ihe conslrainl liij is satisfied is given by Tjj (Conversely, for 

any Tjj G L (C^), Ihere is a unique rank-1 orlhogonal projector Iljj G L (C^ 0 C^) whose nullspace 
is spanned by 0 Tjj for !■(/)*) ranging over C^.) This suggest a quanlum analogue G of an 
implication graph: For each possible assignmenl I?/)) to a qubil i, we define a vertex (1, |'0)), and include 
a directed edge (i, li/))) —)• (y, |0)) if Ihere is a Iransfer malrix T^ (corresponding to some conslrainl 
liij) such lhal Tjj \iIj) = c\(f)) for some c 7 ^ 0. We Ihen ask if for each qubil i, Ihere is a vertex (1, \ilJi)) 
which cannol reach any (i, jr/)')) where (f. \'f'i). If Ihere are such palhs (1, —)••••—>■ (1, |?/)')) 

for all I'i/’i), this is analogous to Xi and Xj being in a common strong component in the APT algorithm. 

As it stands, this approach has a shortcoming: In the quantum regime, each qubit has a continuum of 
possible assignments (rather than two), which may generate unbounded orbits in an APT-style algorithm. 
However, by applying techniques of Faumann et al. [FMSSIO] from the study of phase transitions in 
random 2-QSAT, we may in some cases reduce the set of possible assignments for a qubit i to one or 
two. Consider the interaction graph G' of a 2-QSAT instance, in which vertices correspond to qubits, 

^The usual convention is to describe quantum states by unit vectors in C^, albeit up to equivalence under multiplication 
by « G C for \z\ — 1. However, vectors produced via transfer matrices might not be normalised. As we are not explicitly 
concerned with the probabilities of any measurement outcomes obtained from quantum processes, we represent quantum states 
by vectors which are equivalent up to multiplication by arbitrary scalar factors. 
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and two vertices are connected by an (undirected) edge if the corresponding qubits i and j are subject 
to a constraint liij. Suppose C = (ui,..., u*, ui) is a cycle in G', with transfer matrices arising 

from each constraint , and compute Tc := Tvtvi • • • If Tc has a non-degenerate 

spectrum, then the only possible satisfying assignments for vi are eigenvectors of Tc [LMSSIO] (see 
also Lemma 2). In effect, computing Tc “simulates” uncountably many (!) traversals [i, |a)) —)••••—)• 
(i, 1/3)) in G; restricting to the eigenvectors of Tc corresponds to ignoring vertices in G which are 
infinitely far from the top of any topological order of G. If we hence describe cycles G with non¬ 
degenerate Tc as discretizing, this suggests the approach of finding a discretizing cycle at each qubit 
i, and using it to reduce the number of possible states on i to one or two. This simple principle is the 
starting point of our work. 

Despite this simplicity, some obstacles must be addressed to obtain a linear-time algorithm. In the 
setting of random 2-QSAT [LMSSIO], every cycle C is a discretising cycle with probability one, as there 
is zero probability that either a transfer matrix is singular, or that a product of them has a degenerate 
spectrum. This allows one to quickly reduce the space of assignments possible for a qubit. In contrast, in 
our setting (i.e., worst case analysis), we cannot assume such a distribution of transfer matrices arising 
from a 2-QSAT instance. For instance, any constraint Iljj corresponding to a product operator (e.g., a 
classical 2-SAT constraint) has a singular transfer matrix, which when multiplied with other singular 
matrices may give rise to a singular cycle matrix. Even if a discretising cycle G does exist using some 
of the edges jk, ki, ..., we may have to traverse those edges multiple times to discover C, which 
is worrisome for a linear-time algorithm. Furthermore, we must address the case in which there are 
no discretising cycles at all to get a discrete algorithm started. In order to demonstrate a linear-time 
algorithm for 2-QSAT in the spirit of APT, these problems must be carefully addressed. 

Our approach to resolve these issues is as follows. In an instance of 2-QSAT in which all trans¬ 
fer matrices are non-singular, we show that discretising cycles are easy to find if they exist, and that 
the absence of discretising cycles allows one to easily obtain a satisfying state. If, on the other hand, 
singular transfer matrices are present, the corresponding product constraints 11^ = |a)(«li ® \P){P\j 
themselves impose a different discretising influence: If and 1/3-*-) are states orthogonal to |a) and 
\I3) respectively, then at least one of the assignments (/, ja-*-)) or (j, 1/0-*-)) is required for a satisfying 
assignment. This leads us to adopt an approach of “trial assignments” which is highly reminiscent of 
another linear-time 2-SAT algorithm due to Even-Itai-Shamir [EIS76], which attempts to reduce to an 
instance of 2-QSAT with fewer product constraints by determining partial assignments satisfying Hij. 
(For simplicity, we also adopt the approach of trial assignments for qubits whose state-space have been 
reduced by discretizing cycles.) This leads us to our algorithm SOEVEq (Figure 1, in Section 4), which 
combines elements of both the Even-Itai-Shamir [EIS76] and Apsvall-Plass-Tarjan [APT79] linear-time 
2-SAT algorithms as described above. 

Previous work. There is a long history of polynomial time solutions for classical 2-SAT [Qui59, DP60, 
Kro67, EIS76, APT79, Pap91], ranging from time O(n^) to 0{n -\- m). As we mention above, the most 
relevant of these to our setting are the algorithms of Even, Itai, and Shamir [EIS76] (based on limited 
backtracking) and Aspvall, Plass, Tarjan [APT79] (based on strongly connected component detection). 

In contrast, little work has been performed in the quantum setting. Until recently, Bravyi’s algo¬ 
rithm was the only explicitly articulated algorithm for 2-QSAT, and requires 0{n^) field operations 
and 0{n^M{n)) bif operations. Other work on 2-QSAT instead concerns either the structure of the 
solution space of instances of 2-QSAT [EMSSIO, dBOE, CCD+11], or bounds on counting complex¬ 
ity [JWZll,dB14]. 

Propagation of assignments using transfer matrices is present already in Bravyi [Bra06], and the 
results of Eaumann et al. [EMSSIO] allow us to restrict the possibly satisfying states on single qubits by 
finding discretising cycles. We incorporate these into efficient discrete algorithms for testing possible 
assignments, and provide a cost analysis in terms of field operations and bit operations. In contrast to 
the random 2-QSAT setting of [EMSSIO], we do not assume any particular distribution on constraints. 

Note: Very recently, Arad et al. [ASSZ15] independently presented an algorithm for 2-QSAT, which 
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also runs in 0{n + m) time using unit-cost field operations. The overall structure of our algorithm 
appears similar to theirs, though our treatment of the key issue of 2-QSAT instances with only entangled 
constraints appears to use different techniques (in particular, Ref. [ASSZ15] appears to be based on 
results of Ji, Wei, Zeng [JWZll] which modify the instance itself, whereas we use ideas of [LMSSIO] 
to tackle the existing instance via the concept of discretizing cycles). As well as obtaining an upper 
bound on field operations matching Ref. [ASSZ15], we also include an analysis of the bit complexity 
of our algorithm SOLVEq, and in particular indicate how our algorithm matches the asymptotic bit 
complexity of the best algorithms on classical instances of 2-SAT. 

Significance and open questions. Quantum fc-SAT and its optimization variant, /c-LOCAL HAMIL¬ 
TONIAN [KSV02], are central to quantum complexity theory, being canonical QMAi- and QMA- 
complete problems for A: ^ 3 and 2 respectively [Bra06, GN13, KSV02, KKR06], just as /c-SAT and 
MAX-fc-SAT are central to classical complexity theory as canonical NP-complete problems. Moreover, 
quantum /c-SAT may be motivated using the notion offrustration-freeness in many-body physics [Has06, 
BT09]. It is thus natural to ask what the minimal resources to solve quantum /c-SAT are. 

We now discuss the number of field operations used by our algorithm, 0(m -|- n), versus the number 
of bit operations, 0{{m + n)M{n)), in Theorem 1. There is no such distinction in the complexity of 
existing 2-SAT algorithms: As bits have only a finite range of values, traversing a chain of implications 
in the implication graph poses no precision issues. In the quantum setting, however, such a traversal 
involves computing products of 0(n) transfer matrices over some field extension of the rationals. Trial 
assignments resulting from these products may require 0(n) bits per entry to represent; testing whether 
two possible assignments are equivalent may involve multiplying pairs of n-bit integers. This is the 
source of the M{n) term in the bit complexity estimate of Theorem 1. To compare, similar considera¬ 
tions applied to Bravyi’s 2-QSAT algorithm gives an upper bound of 0{n^M{n)) bit operations. 

It is not obvious that a faster runtime in terms of bit complexity should be possible in general. As we 
show in Section 6, it is simple to construct a 2-QSAT instance with m G 0{n) and whose unique product 
state solution requires 0(n^) bits to write down. Thus, among algorithms which explicitly output the 
entire solution, our algorithm is optimal up to log factors, taking time 0(nM(n)) G O(n^) for M(n) G 
0(n log(n) [F07]. Furthermore, as we also show in Section 6, for any algorithm A for 

2-QSAT which produces the marginal of a satisfying solution (if one exists) on a single qubit in reduced 
terms^, there is a linear-time reduction from multiplication of n bit integers to the problem solved by A. 
It follows that such an algorithm A must run in time fI(M(n)). As discussed in Section 6, this implies 
that unless M(n) G 0(n), there is no general algorithm for 2-QSAT with linear bit complexity if the 
output is required to be in reduced form. 

Theorem 1 does reveal a special case in which we can recover linear bit complexity: namely, when 
all constraints are product operators, such as classical 2-SAT instances. This special case still has es¬ 
sentially quantum features. For instance, the phase transitions for satisfiability and for counting com¬ 
plexity in random product-constraint instances more closely resemble those of 2-QSAT than of classical 
2-SAT [dB14]. Furthermore, “YES” instances of product-constraint 2-QSAT (e.g. such as instance 
{100)(001 , |11)(11|, |-|--|-)(-|—|-|}on two qubits) may not be satisfiable by product states (see Section 2 
for how our algorithm deals with such instances). 

We close with open questions: is the bit-complexity of 0((n + m)M(n)) for producing explicit 
assignments optimal? Is there an 0{M{n)) upper bound for producing representations of marginals of 
satisfying assignments? 

Organization of this paper. In Section 2, we give notation, definitions, and the basic framework 
for our analysis (including transfer matrices). Section 3 presents a series of lemmas and theorems to 
demonstrate how to overcome the obstacles presented in this introduction, and which form the basis of a 
proof of correctness for our algorithm SOLVEq. Section 4 states SOLVEq. Section 5 sketches bounds 

^N.B. Our algorithm SOLVEq is not such an algorithm, as the output may include cancellable factors in its representation. 
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on the runtime of SOLVEq in terms of the field operations and bit operations. Additional technical 
details are deferred to Appendix A. Section 6 discusses lower bounds on the bit complexity of 2-QSAT. 

2 Preliminaries 

We begin by setting notation, stating definitions, and laying down the basic framework for our algorithm, 
including details on ttansfer matrices. 

Notation. The notation := denotes a definition and [n] := {1,..., n}. The vector space of (possibly 
non-normalised) single-qubit pure states is denoted H := C^. For a string x = xix^ ■ ■ ■ Xn ^ {0, 1}"^, 
we write \x) := |xi) 0 • • • <8) |xn)- For a vector space X over C, we write L {X) for the set of linear 
operators on X. The nullspace of an operator A is denoted ker(A). For vectors |?/)) and |(/)), we write 
|'0) oc |(/)) if |r;) = c\w) for non-zero c G C; if we wish to also allow c = 0, we write | V') oc* \(f)) instead. 
The latter two definitions extend straightforwardly to matrices. Given |yi) G T-L, we write for the 
unique vector (up to scalar factors) which is orthogonal to jy)). 

2.1 Quantum 2-SAT 

We now present a formal definition of quantum fc-SAT (or fc-QSAT). 

Definition I (Quantum fc-SAT [Bra06]). Fet n ^ A; be an integer, and {Ilj}™ ^ C L be a set of k- 

local orthogonal projection operators {i.e.,of the form for A:-qubit projectors Hj) with coefficients 

over some number field F. 

Decision problem. Does there exist a state \'ij;) G such that Ilj \'ij;) = 0 for all i G [m]? 

Search problem. Produce a description of such a state |^) if it exists. 

For precision reasons, we require in particular that the coefficients are drawn from a number field 
(a finite-degree field extension F = Q[a;]). We suppose that F is also specified as part of the input 
by means of a minimal polynomial p G Q[x] for which F = Q[x\/p, together with a specification of 
how F embeds into C [Coh93]. (More details are given in Appendix A.2, where the runtime of the 
algorithm is carefully analyzed.) In the literature for 2-QSAT, one is usually more interested in how 
the structure of the placement of the projectors Tlj affects the solution space, rather than the complexity 
of the specification of F or the coefficients. We therefore suppose that there is some constant K which 
bounds from above the size of the specification of F, and of the coefficients of the operators Ilj. 

We next sketch how a 2-SAT instance (j) can be embedded into 2-QSAT (cases A: > 2 are similar). 
For each clause C on boolean variables {xa,Xb), we define an operator lie G L of the form 

lie := |ca)(ca| < 8 ) |cfe)(cfe|, where Ca = 1 if the variable Xa is negated in C, and Ca = 0 otherwise; we 
fix Cb similarly. Then He is satisfied by \xaXb) G if and only if C is satisfied by XaXb G {0,1}^. 
We extend lie to an operator on by taking its tensor product with /2 G L on all tensor 

factors i apart from a, 6 G [n]. Performing this for all clauses yields an instance of 2-QSAT, {He}, in 
which all of the projectors are product operators (as mentioned in Section 1), and which imposes the 
same constraints on standard-basis vectors \x) as the clauses C impose on x G {0,1}”. Furthermore, as 
each He is positive semidefinite and diagonal, any \iIj) for which He IV') = 0 for all clauses C must be a 
linear combination of vectors |x) which also satisfy He |x) = 0 for all C. Thus this instance of 2-QSAT 
is satisfiable if and only if the original instance of 2-SAT is, in which case there is a bijection between 
the solution space of the 2-SAT instance and a basis for the solution-space of the 2-QSAT instance. 

Finally, for a given 2-QSAT instance, we denote by G its (potentially infinite) implication graph 
(defined in Section 1), and by G' its interaction graph, whose vertices are labelled by qubits, and with a 
distinct edge between vertices i,j for each projector acting on them. 
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Reduction to cases satisfied by product states. We mainly consider product-state solutions to in¬ 
stances of 2-QSAT, in spite of instances (such as those descrihed in “Significance and open questions” 
in Section 1) in which no product state can he a solution. A paradigmatic example is given hy a single 
constraint If* = /4 — where := (|01) — |10))/\/2; the unique satisfying assignment 

is the entangled state Chen et al. [CCD+11] nevertheless show that all instances of 2-QSAT are 

“almost” product-satisfiahle in the following sense: The only pairs of quhits (i, j) which are entangled 
for all satisfying states are those for which the sum of all constraints on {i,j) is an operator Sij of rank 
3 (as with If* above). We may treat such pairs hy imposing the unique assignment iV'ij) C ker(5jj), 
and considering what restrictions this imposes on other quhits fc as a result of constraints on (i, k) or 
(j, k). If we find no conflicts as a result of all such assignments, we obtain a sub-problem which is either 
unsatisfiable, or satisfiable by a product state. (We describe this reduction in more detail in Section 4.) 

Reduction to rank-1 instances. We may require that all constraints have rank 1 (but possibly with 
multiple constraints on pairs of qubits), by decomposing projectors Iljj of higher rank into rank -1 pro¬ 
jectors rijj 1 , > ..., for which Iljj = By the preceding reduction to product-satisfiahle 

constraints, there will then be at most two independent constraints acting on any pair (i, j). 

2.2 Transfer matrices 

A central tool in this work is the transfer matrix, which for product states generalizes the equivalence 
between (xj V xj) and (x* ^ Xj) A {xj Xj) for bits. Consider a rank-1 constraint Hij = |i^)((^| on 
qubits i and j, where |0) has Schmidt decomposition |(/)) = a |ao) \bo) + (5 |ai) | 6 i). Then, the transfer 
matrices T<^ jj, T^jj £ L (C^) from i to j and from j to i are respectively given by: 

=/3\bo){ai\ - a\bi){ao\, = P\ao){bi\ - a\ai){bo\ ■ (1) 

(When the state \(j)) is clear from context, we simply write Tjj and Jji-) Given any assignment | V’i) G 
on qubit i, the transfer matrix prescribes which single-qubit states \f!j) on j are required to satisfy 

Iljj, via the constraint {ipj) oa* |'0j). If T<^ ^ \fii) / 0, then {ipj) is uniquely determined (up to 
equivalence by a scalar factor). This is guaranteed when If) has Schmidt rank 2, as T<^^jj then has full 
rank. On the other hand, if T \'ipi) = 0, then liij is satisfied for any assignment on j, so that j remains 
unconstrained. This situation may only occur if | (/>) is a product constraint, so that Thas a nullspace 
of dimension 1. This generalises the effect in the classical setting, that assigning Xj := 1 satisfies the 
constraint (7 = (xj V Xj), regardless of the value of xf the corresponding constraint and transfer matrix 
are |(/)) = | 00 ) and T = — | 1 )( 0 |, respectively. 

Walk and cycle matrices. We take the closure of the transfer matrices, under composition along walks 
in the graph. For any walk W = (ui, U 2 ,... Vk) in a graph G = {V, E), multiplying the transfer matrices 
'^■vk-i'Uk ■ ■ ■ '^V 2 -V 3 '^viv 2 yields a new transfer matrix T\y, which we call the walk matrix of W (or path 
matrix, if FF is a path). For such a walk W, define := {vk,Vk-i, ■ ■ ■, V 2 ,vi). If a transfer matrix 
Tw has singular value decomposition Tyt^ = sq Ko)(^o| + si one may show by induction on 

the length of W that 

Tv[/r = ± (•So |g)( 4| + Si ko)(4l), ( 2 ) 

where the sign depends on whether W has odd or even length. In particular, this implies that T wT= 
EsqSiI. Thus T^yT^yR oc* I for all walks W, with a proportionality factor of zero if and only if T^y is 
singular. In particular, walk operators can sometimes be composed to represent “cancellation” of edges: 
For walks Uy = W'W and C /2 = W^W, if Tw is invertible, we have T w'W" ^ = 

T[/if/ 2 , representing a form of composition of walks in which repeated edges {ij){ji) cancel. 

For C = {v,ui,U 2 , ■ ■ ■ ,Uk,v) a cycle in G, the cycle matrix of C at v is just the walk opera¬ 
tor Tc arising from the walk from v to itself along C. We consider the cycles G and (e.g.) C' = 
{ui,U 2 ,..., Uk, V, ui) to be distinct as walks; in particular, C and C' may give rise to distinct cycle 
matrices Tc/ 9 ^ Tc, which in any case represent operators on the state-spaces of distinct qubits. 
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Walk operators (and cycle operators in particular) allow us to more easily express express long-range 
constraints implicit in the original projectors 11 (as one may show by induction): 

Lemma 2 (Inconsistency Lemma), Let W = (v,vi,V 2 , ■ ■ ■, V£, w) be a walk in G' with walk operator 
Tvy, and let |'I') G "H®” be a product of single-qubit states \'ff} for each v € [n], If\'fw) 9 ^* \'fv)< 

then at least one constraint Iljj corresponding to an edge in W is not satisfied by |'I'). 

3 Efficient reductions via trial assignments in 2-QSAT 

As outlined in Section 2, we consider rank-1 instances of 2-QSAT which either have a product solution 
or are unsatisfiable. In this section, we describe a means to incorporate transfer matrices into an efficient 
algorithm for 2-QSAT via the notion of a chain reaction: An ElS-style subroutine for trial assignments. 

As in Section 1, we define fhe implication graph of a 2-QSAT insfance fo be an (infinife) direcfed 
graph G = {V, E), where V is fhe sef of pairs (i, If))) for qubifs i and (disfincf) sfafes If)) G LL. There 
is a direcfed edge {i, jV')) —(j, |(/))) if and only if fhere is a consfrainf liij wifh Iransfer mafrix Tjj such 
fhaf Tjj IV’) oc 10). A “chain reaction” is a depfh-firsf exploration of fhe nodes of G: 

Definition II (Chain reaction (CR)). For a qubif i and sfafe |0j) G LL, fo induce a chain reaction (CR) 
at i with |0j) means fo “partially fraverse” G, sfarfing from (i, \ipi)) and keeping a record of fhe vertices 
(u, {ipu}) seen for each u. This fraversal is governed by a depfh-firsf search (DFS) in fhe inferacfion 
graph G', as follows. For each vertex (tt, \'fu)) visifed and each edge {u, v} in G', compute T^.^ IV'n)- 
If fhis vector is non-zero, lef 10^) := T^.,; |0u), and fraverse fo (u, 10^)) in G. For any vertex {v, 10,;)) 
visifed by fhe CR, we say fhaf fhe CR assigns \'ipy) to v. In fhe sequence of vertices in G visifed by fhe 
CR, we may refer fo insfances of verfices (u, |0)) for a given u G L as fhe^zr^t assignment, fhe second 
assignment, etc. made fo v by fhe CR. 

Edges of G' (and walks in G') which are fraversed by fhe depfh-firsf search (DFS) governing a chain 
reaction, are also said fo be traversed by the chain reaction (CR) itself. 

The role of CRs in our analysis is to reveal constraints imposed by transfer matrices in an efficient 
manner. Specifically, if the DFS in G' which governs the CR encounters a cycle, it will visit a vertex v 
in G' twice, and so makes “assignments” to v more than once. If these assignments do not match, we 
say the CR has a conflict. If no such conflicts occur, the CR is called conflict-free. (In either case, it does 
not continue the traversal of the CR from the second, third, etc. assignments.) We formalise the intuitive 
significance of conflicts as follows: 

Lemma 3 (Conflict Lemma). If a CR induced at v with G Td has a conflict, then no product state 
1^) G for which the state of v is \'ipf) is a satisfying assignment. 

Proof. A conflict in the CR indicates the presence of two walks Wi and W 2 in the interaction graph G', 
from V to some vertex w, for which Ey/i \'fv) 9^* Ty/j \'fv)- It follows from the Inconsistency Lemma 
(Lemma 2) that any product state in which v takes the state |0,;) is not satisfying. □ 

With the concept of CRs in hand, we can present the key ideas used by our algorithm. First, conflict- 
free CRs yield partial assignments, which preserve the satisfiability of the instance defined on the re¬ 
maining unassigned qubits. Second, if a 2-QSAT instance is satisfiable, then a conflict-free CR can 
be found efficiently. Our algorithm (presented in Figure 1) essentially operates by repeatedly finding 
conflict-free CRs, and removing the qubits given assignments by each CR, until either a conflict is de¬ 
tected (in which case we reject), or no unassigned qubits remain (in which case we accept). 

3.1 Using conflict-free chain reactions to remove qubits 

The main result in this Section is Theorem 7 (Set-and-Forget Theorem), which is essentially the converse 
of Femma 3, and allows us to reduce instances of 2-QSAT by providing partial solutions obtained from 
a CR induced on a single qubit. 
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We begin by proving a correspondence between CRs and walk operators, in the sense that if there is 
a walk W = (v,vi,V 2 , ■ ■ ■ ,w) in G', and if ^ ker(T^), a CR induced at v with a state should 
assign to w. The obstacle here is that the CR might not traverse any of the edges of W before 

assigning a state to w, we must then relate W to other walks in G'. We do so as follows. 

Lemma 4 (Unique Assignment Lemma). Suppose there exists a state |^) and a walk W in G' from v to 
w such that T\y |^) oc \(p). Then, for any conflict-free CR induced on v with |'(/;), w is assigned \(f)). 

Proof We show that there is a walk W in G' which is followed by the CR, for which It/)) oc \(fl). 
Suppose W = {v,U£,, ui,uo) for uq := w. For each z ^ 0, let Wi denote the segment {v, Ui,..., Ui) 
of the walk W. Let m be the smallest integer such that the CR traverses Wm- If m = 0, then we may 
take W = W is, the walk followed by the CR from v to w. Otherwise, we show a reduction to “deform” 
W, to obtain walks W, W, ..., and a decreasing sequence m > m' > m" > • • •, for which the CR 
follows the walks Wm, W^,, W^„, etc.. These walks have successively shorter “tails” of edges which 
are not followed by the CR: the final such walk W is then one which is completely followed by the CR. 

Given that m > 0, let IV’m) = '^Wm IV’)- By hypothesis, the CR does not traverse the edge 
{um, Um-i), either because IV’m) = 0, or because of an assignment on Um-i- The former im¬ 
plies Tw IV’) = 0 9 ^: |(^), contrary to hypothesis. Then there is a walk VF^_i = (u, • • • ,u'm, Um-i) 

in G', which is followed by the CR to make the assignment to Um-i- (Note that the assignments to Um-i 
made by both W and are proportional to one another, as otherwise the CR would have detected 

a conflict when attempting to traverse edge {um, Um-i) during its breadth-first search.) We extend the 
walk to a walk W' = (u, ..., Um-i, • • •, ui,w). The CR has traversed W' at least as far 

as the vertex Um-i, missing out fewer edges at the end than it does for W. Furthermore, as the CR is 
conflict-free, we have • • • T„^„^ ^ \ frn) oaJw' |V’)> so that \<j)) cxJw IV’) oc T^/' |V’) by 

construction. 

Repeating the reduction above yields a walk W in G' which is completely followed by the CR, for 
which T^lip) oc |(/!)) by induction. Then \cj)) is the assignment made to w by the CR. □ 

Note that the above result holds regardless of which walk W we consider from v to w, so long as 
Tw IV’) 7 ^ 0. Thus a conflict-free CR induced at v depends on a consistency between all walk operators, 
from V to any other given w, relative to the initial assignment For the case w = v, we then have: 

Lemma 5 (Circuit Lemma). Let W be a closed walk starting and ending at v. If \'ff) is not an eigen¬ 
vector ofTw, then inducing a CR at v with \'ff) yields a conflict. 

Proof. By definition, the CR assigns to v. If the CR is conflict-free, then either Ty/ \ flif) = 0 or 
Tw IV’i;) oc {"fv), by Unique Assignment (Lemma 4). Thus, if \iljy) is not an eigenvector of Tiy, such a 
CR will have a conflict. □ 

Lemma 4 also allows us to decouple the set of vertices given assignments by a CR, from the rest: 

Lemma 6 (Unilateral Lemma). For any state \il)) and vertex v, suppose that a CR Gi induced at v with 
lip) is conflict-free. Let A denote the set of vertices given an assignment by Gi, and \'ipa) denote the 
assignment made by G at a given a £ A. Then, for any constraint Habfar a £ A and b £V\ A and for 
any \(f)) £ FL, Uab{\fa) C* IV*)) = 0. 

Proof. For a £ A, the CR Gi must discover a walk W = {v,vi,V 2 ,..., vf) for V£ := a, such that for 
any sub-walk Wi = {v,vi,... ,Vi) for I ^ i ^ we have T^j |V’) / 0- The assignment made to a by 
Cl is then \ipa) := T]y \Tp) by construction. Conversely, a.sb ^ A, it follows by the Unique Assignment 
(Lemma 4) that all walks VF* in G' from vtow satisfy Tw* | V’) = 0- this holds in particular for the walk 
W' = (r;, ni,..., a, b). Then Tab IV’a) = 0, which is to say that na;,(|r/:a) (g) |(/))) = 0 for all If). □ 

The Unilateral Lemma allows us to treat conflict-free CRs as “set-and-forget” subroutines, in which we 
establish partial assignments on a set of qubits which we may remove from an instance T = 
of 2-QSAT, obtaining a simpler, equivalent instance V C (P. Formally, we have the following. 


Theorem 7 (Set-and-Forget Theorem). Let T = be an instance of2-QSAT with interaction 

graph G' = {V,E). Suppose that C is a conflict-free CR induced at v £ V with £ LL, and let 
A denote the set of vertices given assignments by C. Let 7' be a 2-QSAT instance obtained from 7 by 
removing all constraints acting on A. Then 7 is satisflable by product states if and only if 7' is. 

Proof. For a given a £ A, let I'lpa) denote the assignment made by C to a. By construction, the states 
Ifia) jointly satisfy all constraints between vertices in a; and by the Unilateral Lemma (Lemma 6), the 
states I'i/^a) also unilaterally satisfy constraints between vertices in A and vertices in U \ ^. If 7' is 
satisflable by a state |$) = \^a), then 7 is satisflable by I'F) = I'i/’a)] <8) |$). For the 

converse, suppose that 7 is satisflable by some state I'F') = <S>v^v \'^v) (which may not agree with 
the assignments made by C). Define jT') = I'i/’a)] ® Again, iTi) satisfies all 

constraints acting on vertices a £ A, and by construction it also satisfies all consfrainfs infernal fo U \ A. 
Then I'F) also safisfles 7, and ifs resfricfion fo U \ ^ satisfies 7'. □ 

3.2 How to find conflict-free chain reactions efficiently 

The Sef-and-Forgef Theorem (Theorem 7) provides us wifh fhe following approach fo find a producf 
assignmenf for an insfance 7 of 2-QSAT: (/) pick an unassigned verfex v, (//) find such fhaf fhe CR 
induced af v wifh |i/)^) is conflicf-free, and {Hi) use fhis CR fo produce a partial assignmenf, reducing fo 
an insfance 7' wifh fewer qubifs. If remains fo affempf fo find such a sfafe |^/;^), or defermine fhaf none 
exisf, from fhe confinuum TL of single-qubif sfafes. 

As we describe in Section I, and as shown by fhe Circuif Lemma (Lemma 5), if suffices for us 
fo resfricf our search for fo fhe eigenvectors of T^y for a closed walk W, e.g. a cycle. Define a 
discretizing cycle as a direcfed cycle C (sfarfing and ending af some verfex v) wifh cycle mafrix Tq I- 
For such cycles, fhe Circuif Lemma allows us to narrow down our search for fo fhe eigenvectors 
of Tc, of which fhere are af mosf fwo. This raises fwo questions: (1) How to find discretizing cycles 
efficienfly, and (2) how fo deal wifh variables which are nof on any discrefizing cycle. 

As nofed in Section 1, producf operators complicafe fhe fask of defecting discrefising cycles, buf also 
provide a second way fo narrow fhe search for assignmenfs leading fo conflicf-free CRs. 

Lemma 8 (Producf Consfrainf Lemma). In a product-satisflable instance of 2-QSAT with a rank-1 prod¬ 
uct constraint projecting onto a state \(l)uv) = ITu) ® \lv)> least one of the CRs at vertex u or v with 
states 1 7 ^) or lyj"), respectively, is conflict-free. 

Proof. Suppose fhaf fhe insfance is producf safisfiable, buf fhaf a CR sfarfing af qubif u wifh sfafe 
| 7 ^) has a conflicf. Then by fhe Conflicf Lemma (Lemma 3), for any safisfying producf sfafe \'f) = 
^v€V l^t;)? we have |'0tx) 9^ \Hu )■ construction, we have |'0^) oc T^.^ j^u) — \7v ) Thus a CR 
induced af v wifh lyj-) will be conflicf-free (as ofherwise \'ijf) cannof be a safisfying assignmenf, again 
by fhe Conflicf Lemma). □ 

Using Lemma 8 fogefher wifh fhe Sef-And-Forgef Theorem (Theorem 7), we may find a partial assign¬ 
menf safisfying any given producf consfrainf; repeafing fhis for all producf consfrainfs will eifher (/) 
reveal fhaf fhe original 2-QSAT insfance is unsafisfiable, {ii) yield a safisfying assignmenf for fhe entire 
insfance, or {Hi) yield an equivalenf insfance of 2-QSAT in which all consfrainfs are projectors onfo 
entangled sfafes. 

Lef us call an insfance of 2-QSAT irreducible if if has a connecfed inferacfion graph G', and all of 
ifs consfrainfs are rank-1 projectors onto enfangled sfafes. In such an insfance of 2-QSAT, all Iransfer 
mafrices are invertible. A conflicf-free CR induced af any verfex will yield assignmenfs for every ofher 
verfex; fhus, a single discrefizing cycle suffices fo defermine whefher or nof fhe insfance is safisfiable. 
We show fhaf when a discrefising cycle is presenf in such an insfance of 2-QSAT, if is easily found: 

Lemma 9. Suppose G' is an interaction graph of an irreducible instance of 2-QSAT, which contains a 
discretizing cycle G. Let T C G' be a tree which contains all of the vertices of G. Then there is at least 
one edge e in G, such that the (unique) cycle in the graph T U {e} is a discretizing cycle. 
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Proof. In the tree T, there is a unique path P^^yj from any given vertex v ^ V to any other connected 
vertex w. Furthermore, by the irreducibility of the 2-QSAT instance, Tis non-singular in each case. 
Suppose that C = (ui, U 2 ,..., ui) is a discretizing cycle in the implication graph G. Consider the 
closed walk from vi to itself in T, given hy W = Pviv 2 Pv 2 V 3 • • • Pv^vi - By induction, we may show 
that the truncated walk W' = Py^^y^Py^y^ ■ ■ ■ Pyf^_^v^ satisfies T^' oc Toc P~pl ^ for each t thus 
Tw oc /. However, Tc = • • • Py 2 V 3 PviV 2 9 ^ ^ by hypothesis. Then there is an edge vw in C for 

which (f TThen the unique cycle C" in T U {vw} contains the path Pyyj from v to w, as well 
as the edge vw, and has cycle matrix Tc = oc T“^T p^^ (f L □ 

Theorem 10 (Cycle Discovery Theorem). Suppose G' is the interaction graph of an irreducible instance 
of 2-QSAT, and contains a discretizing cycle C. Then a depth-first search from any vertex v & V, in 
which each edge is traversed at most once, suffices to discover a discretizing cycle C'. 

Proof Consider a DFS starting from any vertex v & V. Define a tree T C G, in which each edge e 
traversed by the DFS is included if and only if e is traversed for the first time some vertex is visited. As 
the DFS reaches each vertex w, it also computes the path operator Tp„^ for the path taken from v to 
w. Each time the DFS traverses an edge uw from some vertex u to a vertex w which it has previously 
visited, it tests whether Tp„„ oc T^^^Tp^^. If so, it continues the DFS from w. Otherwise the cycle 
C' consisting of Py^Pyy, followed by wu is discretizing, as Tc/ oc T„^T (f* I- Conversely by 

Lemma 9, if G has a discretizing cycle, the DFS must eventually traverse such an edge. □ 

Implicit in Theorem 10 is a linear-time algorithm for finding discretising cycles in an irreducible insfance 
of 2-QSAT, when one is presenf. It remains to describe how to treat irreducible instances which have 
no discretizing cycles. The absence of any means of discretising the state-space of any qubit in such 
an instance actually represents freedom of choice in this case; while this is implicit in Refs. [Bra06, 
LMSSIO, dBOE], we prove it here for the sake of completeness. 

Lemma 11 (Eree Choice Lemma). In an irreducible instance of 2-QSAT with no discretizing cycles, any 
choice of single-qubit state \'il)y) for some v in the component gives rise to a conflict-free CR. 

Proof Let G' be the interaction graph. Consider a CR induced at v with \'iljy), and consider the paths 
Pyyj to each vertex w, by which the CR makes its first assignment \'fiw) '■= Tp„,^ to w. If P^y^ is 
another walk from v to w, we have TpR Tp/ oc I, from the hypothesis that there are no discretising 
cycles; then Tp/^ oc Tp„^. Thus, regardless of the choice of \'fiy), a consistent assignment Tp^^ {ipy) is 
computed every time the CR traverses an edge to visit w. □ 

4 A linear-time 2-QSAT algorithm 

We finally present our 2-QSAT algorithm in Eigure 1, whose correctness follows immediately by com¬ 
bining the results of Section 3. Eollowing [EIS76], we implement CRs (corresponding to their trial 
assignments) in parallel to ensure a linear bound on run-time; this is expanded upon in Section 5. 

Preprocessing stage to impose input constraints. Eor conciseness, we present SOLVEq in Eigure 1 
with restrictions on the inputs it takes. As we indicate in Section 2, following Chen et al. [CCD+11], 
these restrictions ensure that the instance presented to SOLVEq is either satisfiable by a product state 
or unsatisfiable. These restrictions can can be imposed through a pre-processing phase, as follows. 
Eor each pair {u, v} subject to multiple constraints, sum the projectors to obtain positive semidefinite 
operator Syy. Then perform the following: 

1. If any pair {u, v] has rank(5u^) = 4, halt with output UNSAT (as ker(5u^) contains no states). 

2. Eor each pair {u,v} with rank(S'u.u) = 2, replace the constraints on {u, u} with H^^^i = |r/i)(r/i| 
and = \'q 2 ){'q 2 \, for linearly independent columns \rji) , \r] 2 ) of Syy. 
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Input: An instance of 2-QSAT consisting of rank-1 projectors = {Iljj} with interaction 
graph G' = {V, E), with at most two parallel edges (rt, v) per distinct {n, n} C V. 

1. Discretize on product constraints — While there exists a projector liij = | such that 

\4>ij) = \li) ® |7j) is a product state: simulate CRs at each v G {i, j} with [ 7 ^), in parallel. 

a. If conflicts arise in both CRs, halt and output “UNSAT”. 

b. Fix the assignments for the first conflict-free CR that terminates, remove the set A of 
vertices that it visited from G', and go to Step 1. 

2. Discretize on cycles — While there exists u G C: search for a discretizing cycle C C G' in 
the same connected component of v. 

• If such a cycle G is found at a vertex w. Let Tc be its cycle matrix, and S denote the set 
of eigenvectors of Tc. Simulate CRs at u with each G S, in parallel. 

a. If conflicts arise in both CRs, halt and output “UNSAT”. 

b. Fix the assignments for the first conflict-free CR that terminates, remove the set A of 
vertices that it visited from G', and go to Step 2. 

• If no such cycle is found: Induce a CR at v with \ := |0). Fix assignments made by the 

CR, remove the set A of vertices that it visits from G', and go to Step 2. 

3. Normalize — For each qubit v, compute whether the assignment {ipy) is normalised: if not, 

compute a normalised version := /y /{tpv \'^v) ■ 

Output: “unsat”, or unit vectors G H for each v ^ V which jointly satisfy T. 


Figure 1: An algorithm for 2-QSAT, denoted SOLVEq. 

3. For each pair {u, v} with rank(S'u^) = 3, record the unique state \'il)uv) which spans ker(5„^) as a 
joint assignment to (u, v), and remove the constraints on {u, v}. If lipuv) = IV’n) ® \'^v), record {ipu) 
and IV'u) as assignments to u and v respectively. (If any qubit is subject to conflicting assignments, 
halt with output UNSAT.) 

4. For each pair {u, u} given an assignment \'ij^uv) in the preceding step: 

• If lipuv) = iV’n) ® |V’d)> induce CRs (sequentially) at u with and at v with \'4>v)- 

• If not, and there are non-product constraints Ilju or for any i, halt with output UNSAT (as 
any state of i is compatible only with product states on {u, u}). Otherwise, for each Hiu = 
l7i)(7i| ® l7«)(7n| or flj^ = | 7 i)( 7 i| ® |7t;)(7i;|> induce a CR (sequentially) at i with | 7 ,^). 

For any CR induced, halt (with output UNSAT) either if the CR has a conflict, or if it makes an 
assignment to some other qubit w which has been given a different assignment as a result of a rank-3 
constraint. If no conflict is detected, record the assignments, and remove the set A of qubits given 
assignments from G'. 

This preprocessing phase involves much the same subroutines as SOLVEq itself, and does not contribute 

to the asymptotic run-time. (We include these steps in our detailed runtime analysis in Appendix A.) 

5 Runtime analysis 

We briefly sketch the runtime analyses for SOLVEq in terms of field operations over C and bit opera¬ 
tions, and discuss an optimization for the setting of product state constraints. A more in-depth treatment 
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is given in Appendix A. We assume a random-access machine, so that memory access takes unit time. 
The constraints 11* are specified as 4 x 4 matrices with coefficients from a finite-degree field exfension 
F: Q, whose specificafion is also parf of fhe input; arithmetic operations over such number fields can 
be performed efficienlly [Coh93]. (Furfher defails given in Appendix A.2.) From fhis represenfafion 
we exfracf fhe basis vectors \r}i) for fhe image of If* by faking columns of 11*, and omif normalisation: 
SOLVEq fhen uses Iry*) to represenf 11*. Vectors are only normalised as fhe final step of the algorithm. 

Field operations. SOLVEq requires 0{n+m) operations over C, for n and m the number of variables 
and clauses, respectively. As each vector |? 7 *) is in C^, operations on them (such as determining if |ry*) 
is a product constraint in Step 1) require 0(1) field operations. Eollowing EIS [EIS76], we simulate 
CRs in parallel by inferleaving fheir steps, terminating both simulations as soon as one of them is found 
to be conflict-free. In the preprocessing phase and in Step lb, this ensures that the number of vertices 
and edges removed (upon completion of a conflict-free CR) is proportional to the number of vertices 
and edges visited during the parallel CRs. Hence, the total number of edge-traversals of SOLVEq is 
0{m). Einally, by Step 2, the instance has been simplified fo a disjoinf union of irreducible insfances. 
Theorem 10 ensures fhaf if a discrefizing cycle exisfs in any of fhe componenfs, if can be found by a 
depfh-firsf search; moreover, a single conflicf-free CR suffices fo assign satisfying sfafes fo all verfices 
in each componenf. 

Bit operations. The bit-complexity of SOLVEq differs from the field-operation complexity, for the 
simple reason that multiplying k transfer matrices yields a path matrix with 0(A:)-bit entries. Thus, 
operations such as determining the eigenvectors of such matrices, or whether IV') oc \4>) for vectors 
in the image of these matrices, can take time 0{M[k)), where M{k) is the time to multiply two k- 
bit integers. This follows from the fact that computing y/D € Z for a perfect square Z) G Z can be 
performed in 0{M{n)) time using Newton’s method (see e.g. Theorem 9.28 of Ref. [vzGG03]); and 
that equality testing over Q is bounded by 0{M{n)), for rationals r,s £ Q with n bit representations as 
ratios. (To test whether | and | are equal, one tests whether ad — be = 0.) Since the number of times 
we might need to compute eigenvectors or decide proportionality may scale as m + n, the runtime of 
0({m + n)M{n)) follows. 

It may be necessary for SOLVEq to represent its output using further field extensions E:F, for 
instance, when solving the characteristic polynomial det(A/ — Tc) of a cycle matrix Tc, if the discrim¬ 
inant D = (Tr T c)'^ + 4(det Tc) is not a perfect square in F. (We discuss this aspect of the algorithm 
in Appendix A.2.) However, by the Set and Forget Theorem 7, any extension required by a CR will be 
independent of the CRs involved in the assignments made by other CRs; furthermore, the extensions 
involved in each CR is only quadratic, and specifically by a square root \/l7 of an element 77 G F. 

The approach taken to the quadratic extensions by SOLVEq is unconventional. Specifically, unless 
77 G Q, we do not evaluate whether or not Vd is in F before defining the (possibly trivial) “extension” 
E = F[\/77]- That is, we allow representations of number fields F^ := t<; 2 , • • • ,ajk] in which 

iOj = yTSy for some aj G Fj_i (possibly including the case uji = ^/s for s G Q), and where it may 
come to pass that caj G Fj_i. This prevents us from easily presenting coefficients in a normal form: 
crucially however, it is still possible for us to perform equality tests and arithmetic operations in time 
0{M{n)), for a G F^ expressed as ^/(cui,... , 0 ;^) for /r G Z and / G Z[x] with coefficients of size 
0(n), provided that k is bounded by a constant. (In the case of SOLVEq, we bound k ^ 3.) 

Thus while the output of SOLVEq may not be reduced, it nevertheless presents exact, normalised, 
satisfying states by means of tensor factors. Complete details are to be found in Appendix A.2. 

Reduced complexity of 2-QSAT for product constraints. Using a simple optimization which ex¬ 
ploits product constraints, SOLVEq can in fact accept inputs over any field extension F :Q (algebraic or 
otherwise), and solve them with 0{n + m) bit operations provided that all projectors are product oper¬ 
ators. This requires only that arithmetic operations and equality testing against 0 can be performed in F 
in (7(1) time on inputs with representations of size (7(1). Specifically: the transfer matrix of a product 
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constraint = |7H)(7n| ® l7t;)(7i;| is '^uv oc |7j-)(7«|, whose image is spanned by | 7 ^). For any 
assignment {ipu) to u, if Tu,v \'4’u) / 0, we can set v to | 7 ^) (which by assumption on the input requires 
0(1) bits), as opposed to the potentially more complex vector Ju,v \ipu) oc | 7 ^). Thus, in Step 1, the 
complexity of the assignments made by a CR are no more complex than the vectors of the projectors 
in the input, so that all algebraic operations may be performed in 0(1) time rather than 0(M(n)) time. 
In particular, for classical 2-SAT instances, we recover an 0(m + n) upper bound on the bit-complexity 
of SOLVEq, matching the asymptotic performance of the APT and EIS algorithms [APT79, EIS76]. 


6 On lower bounds for bit complexity 


Most investigations into 2-QSAT are presented in terms of unit-cost operations over some algebraic 
number field F. As a result, no restrictions are usually put on how the output of a classical solution 
to 2-QSAT is represented. To consider lower bounds on the bit-complexity of presenting a solution to 
2-QSAT, it becomes necessary to consider what restrictions to impose on the output, as without such 
restrictions the notion of what form the output may take becomes ill-defined. We impose fhe resfricfion 
of oufpufs which are rationalised, as follows. Eef F = Q[w] be algebraic number field, so fhaf u is an 
algebraic number whose minimal polynomial p is a monic polynomial over Z. An elemenf a G F is 
presented in rationalised form by an expression of fhe form f{uj)/D = a, where 77 > 0 is an integer 
and / G Z[x] is an polynomial such fhaf deg(/) < deg(p). Despite fhe unconventional represenfafion 
described in Section 5, fhis is one consfrainf which fhe oufpuf of SOEVEq respecfs. 

There are further resfricfions which one mighf consider, such as fhe oufpuf sfafe vecfors being nor¬ 
malised (which SOEVEq satisfies), and fhaf fhey be reduced', fhaf fhe coefficienfs a = f{uj)/D satisfy 
gcd(/, 77) = 1. Consider, for insfance, an algorifhm which produces ifs oufpuf in minimal form', each 
sfafe fhaf if oufpufs is normalised, in reduced rationalised form, and involves fhe minimal field exfension 
F:Q necessary fo do so, represenfed as F = Q[w] where fhe minimal polynomial of a; is a monic poly¬ 
nomial over fhe integers. While SOEVEq does nof compute oufpufs in minimal form {e.g., if may fail fo 
produce oufpufs in reduced form), we show fhaf fhe mulfiplicafion time 0{M{n)) for n bif integers is a 
relevanf lower bound for algorifhms which do, suggesting fhaf fhe role of M (n) in fhe upper bound of 
SOEVEq is nof merely accidenfal. 

Lemma 12. There exist instances of 2-QSAT on n vertices and m G (7(n) clauses, such that exhibiting 
a requested tensor factor of a satisfying solution, in minimal form, requires 0(M(n)) bit operations in 
in the worst case. 

Proof. Eel M and TV be posilive, odd n-bil integers, wilh binary expansions M = 2^Mt and 

TV = 2^Nt, where Mi, Ni G {0,1} for each 0 ^ i < n. We conslrucf an insfance of 2-QSAT 

whose unique producf slate solulion is one in which one of fhe qubils q is assigned a sfafe 
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7^ 


| 0 ) + 


2"-hTV7TV 

Vd 


|i) 


mVd {2^ + mn)Vd 

D ' D 


(3) 


where 77 = TV/^ + {2'^ -\- MN^. Eilher fhe middle or fhe righl-hand expression in Eqn. (3) is in 
rationalised and normalised form, depending on whefher 77 is a perfecf square. As M, 2"^ -|- TV/TV, and 
77 are coprime, fhaf ralionalised expression is in reduced form, if F = Q[\/D]- If 77 is neifher a perfecf 
square nor square-free, if may be fhaf \//7 is represented as 5y/ly G Q[\/^], where 77 = D'5^. In Ibis 
case, by hypolhesis, a represenfafion of \Tpq) in reduced form would be idenlical (up fo signs) fo 


\'^q) 


Ms/iy 

D'6 


| 0 ) + 


(2’^ -h MN)s/iy 

W5 


| 1 )- 


(4) 


In any case, fhe minimal form represenfafion would provide a specificalion of fhe exfension elemenf 
'/ly, fhe denominators D'6, and fhe numeralors A = M and 77 = 2"^ -|- TV/TV (or A = —M and 
B = —2” — MN, which yields an equivalenl vector in Q[\/^])- Erom such a represenfafion, one could 
compute TV/TV simply as /7 — 2” (or —B — 2” respectively), which requires time 0{n). 
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The instance we construct is on a chain of 2n + 2 qubits, labelled v G {0,1, 2,, 2n+l}, as 
follows. For 1 ^ i ^ n, we define matrices 


_/ 1 

0 \ 

' \Mn-i 

2 ) 

T 71 , 71+1 



A 

- 

71 , 71+1 — 1 2 

o) 


T 


71+2,72+1+2 


( ' ° 

\Nn-i 2 


(5) 




( 6 ) 


For each f G {0,1,2,..., 2n}, we include a constraint between qubits i and i + 1, with transfer 

matrix and we also include a second constraint Ilg ^ between 0 and 1, with transfer matrix Tg 

The resulting instance of 2-QSAT has two rank-1 constraints between qubits 0 and 1, and one rank-1 
constraint between all other consecutive pairs of qubits. By Chen et al. [CCD+11], this instance is then 
satisfiable by a product state if it is satisfiable at all. It is easy to show that all of the projectors have 
rational coefficients in this case, so we take the field of the representation to be Q itself. 

We show that there is a unique product state which satisfies the above instance of 2-QSAT. It is easy 
to show that the opposite transfer operator to Tg ^ is 


T'i,c 


oc 




n—l 



(V) 


so that T{ gTo,i oc |0)(1|. The only eigenvector of this operator is |0), which is therefore the only single¬ 
qubit state on qubit 0 which is consistent with a satisfying solution. As all other transfer operators are 
non-singular, this determines a unique assignment for all other qubits i in the chain, determined by the 
first column of the walk operator T[g j] := Tj_i_j • • • Ti^ 2 To,i- It is easy to show for 1 ^ f ^ n that 


"^[0,*] - 1 x: 2* 




and that in particular 


from this we easily obtain 


T - I 1 0 . 

\M 2"' i ’ 


[0,n-rl] 


M 2" 
1 0 


from which point we may prove by induction for 1 ^ ^ n that 

M 


[0,n-|-l-|-i] 


SO that 


T + M^Nn-a 


M 


i—t r\n 


2^ZNn-t2 


i—t 


[o,2n-ri] \2^ + mN 2^N 


( 8 ) 


(9) 

( 10 ) 


( 11 ) 


( 12 ) 


Let q be qubit 2n -|-1. The only assignment to this qubit which is consistent with a satisfying assignment 
is then the state given by the first column of T[o 2 n+i]> which is M |0) -|- (2” -|- MN) |1); the vector 
given by Eqn. (3) is the normalised version of this vector. 

Using the techniques of Laumann et al. [LMSSIO], we may show that the space of satisfying assign¬ 
ments of this instance has dimension 2, spanned by the product solution above, and an entangled solution 
on all of the qubits. Considering all projectors except for Tig there is an invertible (non-unitary) local 
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transformation mapping all projectors to the two-qubit antisymmetric projector. Thus 

the satisfying states for these projectors are the symmetric subspace on 5 = 2n + 2 qubits, which is 
spanned by any collection of states of the form for S' + 1 = 2n + 3 distinct states |aj). Any 

state in this space which is not a product state, is entangled across the entire chain of qubits. Undoing 
this change of local co-ordinates, it follows that any state which satisfies the above instance of 2-QSAT 
which is not a product state, is also entangled across the entire chain of qubits (i.e., it cannot be factor¬ 
ized across any cut). Since we require each factor to be explicitly written in the standard basis, such a 
solution would then require explicitly writing out the standard basis elements of a vector of dimension 
22 n-i- 2 . solutions would require vectors of dimension 2^”+^ to represent. Any algorithm which in 
polynomial time exhibits one of the tensor factors of the solution, must therefore exhibit factors of the 
product solution. In particular, it must compute if this is the required tensor factor. As we have 
already shown an 0{n) reduction from computing the product MN to computing the minimal repre¬ 
sentation of lipq), it follows that there is an Q,{M{n)) lower bound for such an algorithm in the worst 
case. □ 

Corollary 12.1. If there does not exist a Q{n)-time algorithm for multiplying two n-bit integers, then 
there does not exist an 0{m + n)-time algorithm to present single-qubit marginals of satisfying solutions 
to instances of 2-QSAT. 

We would also like to show lower bounds for algorithms such as SOLVEq, which do not necessarily 
compute its output in reduced form, but which does compute an explicit output, in the sense of presenting 
a complete description of a satisfying solution via tensor factors. We may obtain such lower bounds even 
for algorithms which produce non-normalised outputs, as follows. 

Lemma 13. There exist instances of 2-QSAT on n vertices and m € 0(n) clauses, such that an explicit 
rationalised (but not necessarily normalised) assignment for a satisfying state requires Q('n?) bits. 

Proof. We may simplify the construction of Lemma 12 by omitting the qubits n -|- 1,..., 2n -|- 1 and the 
projectors which act on them. This yields an instance in which there is a unique product solution (with 
all other solutions requiring a vector of dimension 2”+^ to represent). In this product state, the qubit n 
is in a state \ f>n) oc |0) -\- M\l). More generally, each qubit 1 ^ z ^ n is in a state 

(X |0) + M«|1) (13) 

where = X]t=i As Mn-iMn -2 ■ ■ ■ M 2 M 1 S {0, may be an arbitrary n — 1 bit 

string, and as we require the tensor factors on the qubits i to be presented independently of one another, 
the integers cannot be represented any more succinctly in the worst case; at best, by applying 
arbitrary scalar factors, we may consider representations ^ |0) -|- |1), in which the repre¬ 

sentation of the |1) component of l-^j) may be reduced if a* divides but at the cost of increasing 
the size of the representation of the |0) component. (More formally, if the pair (l/aj, has 

asymptotically smaller Kolmogorov complexity than the pair (1, we would have a contradiction, 

since the former allows us to extract — thus, we would have a shorter description of than 
its Kolmogorov complexity allows.) Thus, for any constant 0 < a < 1, the qubits [an] < z < n all 
require Cl{n) bits to represent, yielding a total lower bound of U(n^). □ 

Corollary 13.1. Up to factors, SOLVEq^ is optimal among algorithms which present 

explicit expressions for satisfying assignments. 
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A Details of runtime analysis 

A.l Complexity of SOLVEq in terms of field operations 

We now show fhaf SOLVEq requires 0(n -I- m) operafions over C, for n and m fhe number of variables 
and clauses, respecfively. Below, we lef G' denofe fhe inferacfion graph induced by vertices which 
remain unassigned af any fixed poinf in fhe algorifhm’s execution. 

Firsf, nofe fhaf as we require fhe coefficienfs fo be drawn from a number field F {i.e., a finite- 
degree exfension of fhe rafional numbers Q; see Secfion 2), fhey cannof encode any uncompufable 
numbers or difficulf compulations. In parlicular, as we note in Section A.2, they can all be performed by 
deterministic polynomial time algorithms; and while SOLVEq may involve operations on coefficients 
outside of F, these are all performed in an easily computed representation of a field extension. We thus 
consider field-operation complexity a meaningful measure of the complexity of our algorithm (and that 
ofBravyi [Bra06]). 

As each constraint Hjj acts on a constant number of qubits, elementary algebraic operations involv¬ 
ing these constraints and their associated transfer matrices — such as computing ranks in the prepro¬ 
cessing stage, determining if a constraint is a product constraint in Step 1, computing the eigenvectors 
of a cycle matrix in Step 2, multiplying vectors by transfer matrices in CRs, etc. — require a constant 
number of field operations. 

The preprocessing phase, described in Section 4, is performed as follows. We collect together the 
constraints on each pair of qubits {u, n} in the form of a partial sum St of the first t constraints on {u,v}. 
We compute St by including only those projectors H* for which rank(nj> rank(S'i_i): pro¬ 
jectors Hj which fail this test do not restrict the joint states of u and v any further. Having obtained 
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a positive constraint operator Suv £ L ("H (8) "H) of maximum possible rank, we perform the appropri¬ 
ate reductions or reject outright, as appropriate. Apart from the CRs which may be performed after 
assignments, the total work per constraint is 0(1), for a total contribution of 0{m). 

Consider the total cost of all chain reactions, either directly performed or simulated, at any of the 
stages in SOLVEq. We take care to simulate CRs in parallel, because it is possible for a given CR 
to traverse a constant fraction of the edges in G" before detecting a conflict. Following [EIS76], we 
interleave the simulations of the two CRs, so that these simulations only last asymptotically as long 
as the CR which terminates without conflict. As all of the edges traversed by the conflict-free CR are 
removed from G', the total length of time of the simulated CRs is 0{m). 

At Step 2 of SOEVEq, in which we attempt to find a discretising cycle, G' is a disjoint union of irre¬ 
ducible instances of 2-QSAT. Theorem 10 (Cycle Discovery Theorem) guarantees that, if a discretizing 
cycle exists in the same component as a vertex u S E, it can be found with a single depth-first search 
from V. Moreover, as the transfer matrices for all remaining constraints are full rank in this case, a single 
conflict-free CR suffices to successfully assign satisfying states to all vertices in G'. The cost of the DFS 
in the component of v is asymptotically bounded by the number of edges in that component, except if v 
happens to be isolated; thus its cost is 0(n -|- m). 

The final stage of the algorithm, in which we renormalise the output vectors for each qubit in the 
original instance, can evidently be performed in 0{n) field operations. 

A.2 Complexity of SOLVEq in terms of bit operations 

We now investigate the bit complexity of SOEVEq, for the case where the projectors are drawn from 
Q. (For product projectors with coefficients over an arbitrary number field, the analysis of Section 5 is 
aheady sufficient, given that the transfer matrices are all 2 x 2 matrices.) 

In a nutshell, the number of bit operations required is similar to the number of field operations, except 
with an increasing overhead as a result of performing arithmetic over the number field F. For instance: 
in a depth-first search to try to discover a discretising cycle, computing the transfer matrix along a path 
P of length i yields a matrix T p whose entries may require 0{i) bits to describe. Calculations involving 
the determinants of such matrices may then involve multiplications of 0(^)-bit integers. 

Representing coefficients. As mentioned earlier, we assume the algebraic coefficients in the input are 
given as elements of a finite-degree field extension F: Q. As we mention in Section 2, we suppose that 
the number field F is presented as part of the input, by means of a minimal polynomial p € Q[x] for 
which F = Q[x]/p, together with a specification of how F embeds into C [Coh93]. Eet a; € F be 
the root of p which corresponds to x -|- (p) G Q[x]/p with respect to this embedding. As part of our 
requirement that the constraints in the input are all specified in 0(1) space, we require that the minimal 
polynomial and a description of the embedding of F into C (e.g., by a disambiguating approximation to 
Lo in Q[i] C C) are also specified with at most some constant number of bits. Eet d = [F:Q] = degp 
represent the degree of the extension from which these coefficients are taken. We represent coefficients 
a G F in a rationalised form a = ^c(uj) for // > 0 an integer, and c(x) a polynomial with integer 
coefficients with degree less than d. 

Given two coefficients a = ^c{oj) and a' = ^c'(w), we compute their sum as a+a' = ^ [p'c (a;)+ 
pLc'{oj)\ , and their product as aa' = [c{uj)c'{u)]. We may compute p'c -|- pc' G Z[x] by taking the 
sums of the integer coefficients, represented as integer vectors. The representation of c(uj}c'(uj) may be 
evaluated as a formal multiplication of polynomials, resulting in a polynomial of degree at most 2d: this 
is then reduced to a polynomial of degree less than d, by repeated application of the identity p{uj)uj'^ = 0. 
This eliminates all terms of the formal product where uj has degree higher than d, and contributes to the 
lower-order terms in cj. For each term for t > d, reducing it to a normal form by this substitution 
involves expansion to a polynomial with at most d terms. This requires 0{d^) =0(1) arithmetic oper¬ 
ations on integers. Then the complexity of putting a -|- or aa' into normal form is dominated by the 
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complexity of the integer arithmetic associated with the integer coefficients of c and c', and the integers 
/i and /i'. 


Coefficients of transfer operators. We represent the rank-1 projectors in an instance of 2-QSAT by 
any one of their rows (r/|, which also have coefficients drawn from F. We may then use {r]\ to com¬ 
pute (an operator proportional to) the transfer matrix corresponding to the same projector. Specifically, 
for any constraint oc \r]){r]\, the corresponding transfer matrix Tu,v may be computed (up to an 
insignificant scalar factor of \/2) as 


Ti/. 7? — 





(14) 


A normal-form representation of the coefficients of these vectors may be computed in constant 

time, where fi and the coefficients of c are themselves 0(1). 

When computing transfer matrices during a CR, we perform a chain of length at most 0(n) additions 
and multiplications of coefficients in F. Thus, even if the representation of constraints in the input each 
require only 0(1) space, the same is not true of the assignments |^/)„) which may be given to the qubits, 
nor of the transfer matrices which may be computed to determine these assignments. As we note in 
Section 5, the arithmetic operations in Step 1 may each be performed in 0(1) time, by avoiding such an 
increase in the representation-size of coefficients; but such an increase is unavoidable for iterated matrix 
products of non-singular transfer matrices, such as may occur in the preprocessing phase and in Step 2. 
Iterated multiplication of I matrices of shape 2x2, each of which are each expressible in 0(1) space, 
can be performed in time 0(fi\ with the result having coefficients expressible in space 0(t). 


Operations in possibly-redundant quadratic field extensions. In solving the (quadratic) character¬ 
istic polynomial of a transfer operator, we may need to represent a square root \fD for O G F. Absent 
an algorithm to efficiently compute the minimal polynomial of over Q, it may be difficult to deter¬ 
mine whether \fD is an element of F, which would be necessary to compute a representation of \/D, 
either in F or in a field extension with easily computed normal forms. Our approach is to simply ignore 
the question of representations with normal forms, and content ourselves with representations in which 
arithmetic operations and equality tests can be performed asymptotically as efficiently as over Q. 

For an input representation over F = Q[u;], let E be the minimal subfield of C which contains F and 
\/I). (In the case that \/I) € F, this field is F itself.) Write cc' = \/D. Consider a representation of the 
form a = ^/(w, where fj, ^ "E and / G E[xi,X 2 ]- We may require that / is at most linear in X 2 , in 
which case we may write 

f{xi,X 2 ) = foixi) + flixi)x 2 . (15) 

Write oo = /o(‘^) and oi = /i(w): then a = + aiy/D). 

• To test equality between a = ^(oo + cli^/D) G F and jS = ^(bo 
whether 

vao — fibo = {fibi — uai)y/D, 

which is satisfied if either uao — /r6o = ~ = 0^ or if Vd G 

^ ^ uap - fibo 
fibi — vai 

A rationalised form of the right-hand side of Eqn. (17) can be evaluated with field operations in 
F, with a bit-cost depending on the size of the representations of a and /3. If the squares of the 
left- and right-hand side are equal, it suffices to verify that the left- and right-hand sides are in the 
same quadrant of the Argand plane (rather than opposite quadrants). Taking the principal square 
root, '/D will always have complex argument ranging over (—^, ^]; it then suffices to determine 
whether the complex argument of the expression on the right-hand side of Eqn. (17) is in this 


-h biVD) G F, we evaluate 
(16) 

F and in particular 
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range, or in the complement. As uj is specified in 0(1) bits at the input, we may evaluate which 
is the case in time M(n), for a, (3 having representations of size 0(n). Given that the right-hand 
side is well-defined, equalify fails in Eqn. (17) if and only if 13. 


To add a = j^{ao + ai'/D) G F and (3 = ^(60 + bi'/D) G F, we simply 

“ + + (“ 1 ^ + bifJ-)VD 

as we would for a genuine quadrafic exfension; similarly, 

(“o&o + oi^iO) -f {aibo + aobi)y/D , 

where in each case we reduce fhese operations fo arifhmefic in F, af a 
represenfafion of a and (3 in F. 


compufe 

(18) 

(19) 

cosf depending on fhe 


In particular: fo perform equalify fesfs or arifhmefic operations befween fwo elemenfs in E, which each 
require 0(n) bifs fo represenf, involves a consfanf number of similar operations over F. Thus fhe cosf 
of fhese operations is 0(M(n)). In fhe case fhaf F = Q rafher fhan F = Q[u;] for cj ^ Q, similar 
argumenfs hold. 


Complexity of computing eigenvalues and testing CRs. In Step 2, solving the (quadratic) charac¬ 
teristic polynomial of Tc for a cycle starting and ending at a vertex u requires evaluating the quadratic 
formula on the coefficients of Tc. Evaluating the discriminant D = (TrTc)^ — 4(det Tc) of the char¬ 
acteristic polynomial can be performed in time 0{M{£)), where M{£) is the cost of the ^-bit integer 
multiplications which are entailed in computing the normal forms involved. Using the extension rep¬ 
resentation described above, we simply define Ec = ¥[y/D]. We fhen use a similar rationalised form 
represenfafion for elemenfs of Ec as for F, and presenf coefficienfs in rationalised form over Ec; arifh- 
mefic over Ec may now involve addifion and mulfiplicafion of ^-bif infegers af each step. Then fhe cosf 
of each arifhmefic operation or equalify can only be bounded by 0{M{1)). 

The eigenvectors |'i/’u,i) and \'4’u,2) of Tc (which are nof necessarily unif vectors) are elemenfs of 
Ec wifh space complexify 0{l). Applicafion of fhe fransfer mafrices fo \'4’u,j) will again yield vecfors of 
size 0{l), albeif represenfing vecfors on Ec. Using fhe rafionalised form described above, we may fesf 
whefher fwo assignmenfs fo a vertex conflicf simply by equably testing, which again may be performed 
in time 0{M{£)). 

Eurfher CRs may give rise fo differenf quadrafic exfensions Ec' of F which are in principle inde- 
pendenl of one anofher. However, by conslrucfion, each CR will involve only a quadratic extension of 
F: By fhe Sef-and-Eorgef Theorem (Theorem 7), if a conflicf-free CR is found from u, fhe sfafe of any 
qubif nof involved in fhe CR is nof impacted by fhe assigned sfafe on u. Thus fhe exfension Ec of one 
CR is nof imporfanf fo fhe operations performed in furfher CRs. 

The potentially mosl expensive aiifhmelic operafions of SOEVEq are fhen evaluafing fhe quadrafic 
formula, aiifhmelic on coefficienfs in fhe exfensions Ec, and equably lesling to lesl for conflicf befween 
polenlially differenf assignmenfs fo a qubif. For a CR which visils £ disfincl qubils, fhese each require 
time M{£) G Q.{£). The complexify of SOEVEq may fhen be bounded by 0((n -|- m)M{n)), arising 
from performing 0{M (^))-cosl operations af mosf a consfanf number of times for each verfex and edge, 
where £ G 0{n). 

Complexity of producing a normalised state as output. With no further asymptotic time complex¬ 
ity, we may compute unit vectors for the representation of the output. If all vertices v £ V have been 
assigned a vector {ipy), evaluating = a /{ipv \ipv) involves multiplication and square roots of inte¬ 
gers of size 0(n). Each vector li/)^) draws coefficients from either F or some quadratic extension Ec; to 
express y/ lipv) exactly may require a further (possibly trivial) extension, := Ec [y/ {i^v li^v) ] ■ 
This final extension may be different for each vertex v, but can be represented by a minimal polynomial 
with 0{n) bits. Evaluating -p-ji \iljy) then involves a final computation requiring time 0{M{n)), so that 
this final normalisation step takes only 0{nM{n)) time. 
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Size of the output. The output consists of a list of vectors 1^/’,;), each of which consists of two complex 
numbers drawn from some field extension : F of degree at most 4. The field F is defermined from 
fhe inpuf, and by hypofhesis can be expressed in 0(1) bifs; fhe extension to get can be done using 
at most two minimal polynomials which can be expressed in 0(n) bits each. The coefficients in B„ 
used by \'ipy) are of the form a = ^c, where c is an integer polynomial in the extension elements, where 
|c|, |//| e 0(n). Thus the space required to express each |^.u) is 0(n); the total space used by the output 
is then at most 0{v?). 
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